bottlefickle

Unregistered less info
6 reputation
1
bio website
location
age
visits member for 1 year, 10 months
seen Sep 14 '12 at 22:56

Sep
14
comment Is Mandatory Access Control overkill for a desktop/lightweight server?
I should have clarified better. Assuming that an exploit is a success, and an attacker could execute code where the handler has jumped to, unless there is a form of address space randomisation, it's going to be easy to predict where to place arguments and system text segment string(system call to use) on the stack. Now if we have MAC to compensate for design flaws in x86, such that address space for memory both kernel and userland is generally predictable, why not just bypass Media Access Control entirely by implementing Address space randomisation entirely in hardware?
Sep
14
comment Is Mandatory Access Control overkill for a desktop/lightweight server?
It's a subjective question I will admit, so I guess it really comes down to preference. It's interesting if you consider that Unix is traditionally known for kernel privilege separation. This confuses the hell out of me, that somebody could write a hack to circumvent a local function call, and instead use a payload of code to spawn a root shell for instance. Isn't this situation the opposite of what was intended with OS privilege separation? My guess is that these "flaws" are a result of the flawed design of interrupt handling on x86 systems, but then again, I am no expert.
Sep
14
awarded  Student
Sep
14
asked Is Mandatory Access Control overkill for a desktop/lightweight server?